(PowerBuilder) Office365 OAuth2 Client Credentials Flow for SMTP, IMAP, POP

See more Office365 Examples

Demonstrates how to get an OAuth2 access token using the Client Credentials flow for use with Office 365 in the SMTP, IMAP, and POP3 protocols.

This is a way of getting an OAuth2 access token for the O365 account you own, WITHOUT needing to grant access interactively via a browser.

Note: OAuth2 access tokens acquired using client credentials are not refreshed. This is because no interactive browser authentication was initially required. You can simply fetch another access token using client credentials using this sample code. Access tokens aquired using client credentials typically have a lifetime of 1 hour.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Http
oleobject loo_Req
oleobject loo_Resp
integer li_StatusCode
oleobject loo_Fac

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Get an OAuth2 access token by sending a POST like this:

// 	POST {tenant}/oauth2/v2.0/token
// 	Host: login.microsoftonline.com
// 	Content-Type: application/x-www-form-urlencoded
// 
// 	client_id=6731de76-14a6-49ae-97bc-6eba6914391e
// 	&client_secret=*****************
// 	&scope=https%3A%2F%2Foutlook.office365.com%2F.default
// 	&grant_type=client_credentials

loo_Http = create oleobject
// Use "Chilkat_9_5_0.Http" for versions of Chilkat < 10.0.0
li_rc = loo_Http.ConnectToNewObject("Chilkat.Http")
if li_rc < 0 then
    destroy loo_Http
    MessageBox("Error","Connecting to COM object failed")
    return
end if

loo_Req = create oleobject
// Use "Chilkat_9_5_0.HttpRequest" for versions of Chilkat < 10.0.0
li_rc = loo_Req.ConnectToNewObject("Chilkat.HttpRequest")

// ----------------------------------------------------------------------------------------
// Important:
// Your Azure Entra ID app must be explicitly setup to allow for the OAuth2 client credentials flow.
// Please follow the detailed guide for how to do it here:
// Office365 App Setup for SMTP, POP, IMAP OAuth2 Client Credentials
// 
// Note: Your registered App must have the following permissions.
// For IMAP: IMAP.AccessAsApp
// For POP3: POP.AccessAsApp
// For SMTP: SMTP.SendAsApp
// ----------------------------------------------------------------------------------------

// Use the application ID for the client_id.
// (In Azure App Registrations, use the Application (client) ID)
loo_Req.AddParam("client_id","CLIENT_ID")
loo_Req.AddParam("client_secret","CLIENT_SECRET")
loo_Req.AddParam("scope","https://outlook.office365.com/.default")
loo_Req.AddParam("grant_type","client_credentials")

// Replace "{tenant}" with your tenant ID, such as "112d7ed6-71bf-4eba-a866-738364321bfc".
loo_Resp = loo_Http.PostUrlEncoded("https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token",loo_Req)
if loo_Http.LastMethodSuccess <> 1 then
    Write-Debug loo_Http.LastErrorText
    destroy loo_Http
    destroy loo_Req
    return
end if

li_StatusCode = loo_Resp.StatusCode
Write-Debug "response status code: " + string(li_StatusCode)
Write-Debug "response body:"
Write-Debug loo_Resp.BodyStr

// The successful JSON response looks like this:

// {
//   "token_type": "Bearer",
//   "expires_in": 3599,
//   "ext_expires_in": 3599,
//   "access_token": "eyJ0eX...ZKaeSVSg"
// }

// Save the JSON to a file for future requests.
// The Office365 access token acquired by client credentials is typically valid for ..
if li_StatusCode = 200 then
    loo_Fac = create oleobject
    // Use "Chilkat_9_5_0.FileAccess" for versions of Chilkat < 10.0.0
    li_rc = loo_Fac.ConnectToNewObject("Chilkat.FileAccess")

    loo_Fac.WriteEntireTextFile("qa_data/tokens/office365.json",loo_Resp.BodyStr,"utf-8",0)
end if

destroy loo_Resp


destroy loo_Http
destroy loo_Req
destroy loo_Fac